Latest Cybersecurity News and Articles

---

Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations

Italy's data protection authority (DPA) has notified ChatGPT-maker OpenAI of supposedly violating privacy laws in the region. "The available evidence pointed to the existence of breaches of the provisions contained in the E.U. GDPR [General Data Protection Regulation]," the Garante per la protezione dei dati personali (aka the Garante) said in a statement on Monday. It also said it

---

New Jersey School District Shut Down by Cyberattack

The district is working with cybersecurity experts to address the issue, and an investigation is ongoing. The district apologized for the inconvenience, and no further details about the nature of the attack have been released.

---

Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

Juniper Networks has released out-of-band updates to address high-severity vulnerabilities in SRX Series and EX Series that could allow threat actors to take control of susceptible systems.

---

New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility

Threat hunters have identified a new campaign that delivers the ZLoader malware, resurfacing nearly two years after the botnet's infrastructure was dismantled in April 2022. A new variant of the malware is said to have been in development since September 2023, Zscaler ThreatLabz said in an analysis published this month. "The new version of Zloader made significant changes to the loader

---

Ukraine’s Security Service Detains Member of Russian ‘Cyber Army’

The suspect, a tech specialist from Kharkiv, was recruited by Russian intelligence and is accused of launching DDoS attacks against Ukrainian state websites and leaking strategic information to the Russian military.

---

Update: Ivanti Connect Secure Zero-Day Patches Delayed

The vulnerabilities, CVE-2023-46805 and CVE-2024-21887, allow unauthenticated attackers to achieve remote code execution. More than 26,000 Connect Secure hosts were exposed to the public internet, with over 410 hosts compromised.

---

Longer Passwords Aren’t Safe From Intensive Cracking Efforts

Hackers exploit weak passwords through dictionary attacks, brute force attacks, and mask attacks, highlighting the importance of strong and unique passwords for every account.

---

Kansas State, Clackamas Community College Respond to Cyberattacks

Clackamas Community College experienced disruptions to online platforms and internal systems, leading to the cancellation of classes and financial aid disbursement delays.

---

Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-2024-21620, are rooted in the J-Web component and impact all versions of Junos OS. Two other shortcomings, CVE-2023-36846 and

---

Biden-⁠Harris announce key AI actions following landmark executive order

Following an executive order aimed to manage the risk of artificial intelligence (AI), the Biden-Harris administration recently announced key AI actions.

---

There was a 151% increase in government vulnerability submissions

According to a recent report, government industries saw a 151% increase in vulnerability submissions in 2023, making it the fastest growing sector.

---

Bastille Raises $44M Series C Investment Led by Goldman Sachs Asset Management

Bastille Networks, Inc. has secured a $44 million Series C investment led by Growth Equity at Goldman Sachs Asset Management, with participation from existing investor Bessemer Venture Partners.

---

Data Theft Plaguing K-12 Schools After Holiday Season Attacks

Ransomware attacks have affected schools like Ohio’s Groveport Madison Schools, causing disruptions to internet access and damage to devices, but efforts to restore systems and minimize data theft have been successful.

---

New Ransomware Gangs Rise Using Rust and Golang Programming Languages

New ransomware families like Albabat, Kasseika, and Kuiper are gaining traction, with Kuiper being attributed to a threat actor named RobinHood and leveraging the concurrency-focused nature of Golang.

---

Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords

A now-patched security flaw in Microsoft Outlook could be exploited by threat actors to access NT LAN Manager (NTLM) v2 hashed passwords when opening a specially crafted file. The issue, tracked as CVE-2023-35636 (CVSS score: 6.5), was addressed by the tech giant as part of its Patch Tuesday updates for December 2023. "In an email attack scenario, an attacker could exploit the

---

A TrickBot malware developer sentenced to 64 months in prison

Vladimir Dunaev was extradited to the US in October 2021 and pleaded guilty to charges related to computer fraud and identity theft. He developed malicious tools that aided in data theft and fraud, resulting in millions of dollars in losses.

---

Saudi Arabia Boosts Railway Cybersecurity

The railway network, spanning 4,500 kilometers in Saudi Arabia, faces challenges in securing its legacy and modern technologies, especially with the introduction of IoT signaling and communication systems.

---

Update: In Major Lapse, Hacked Microsoft Test Account was Assigned Admin Privileges

The hackers who recently broke into Microsoft’s network and monitored top executives’ email for two months did so by gaining access to an aging test account with administrative privileges, a major lapse on the company's part, a researcher said.

---

493 Companies Share Their SaaS Security Battles – Get Insights in this Webinar

In today's digital world, security risks are more prevalent than ever, especially when it comes to Software as a Service (SaaS) applications. Did you know that an alarming 97% of companies face serious risks from unsecured SaaS applications?Moreover, about 20% of these organizations are struggling with internal data threats. These statistics aren't just numbers; they're a wake-up call. We're

---

Who is Alleged Medibank Hacker Aleksandr Ermakov?

Aleksandr Ermakov, a Russian cybercriminal, has been sanctioned by Australia, the UK, and the US for his alleged involvement in the Medibank data breach and his ties to the REvil ransomware group.